Skip to content

Commit 3ce6a62

Browse files
committed
AC-9460: Stored XSS fix via PayPal authentication certificate
* Unnecessary constructor removed
1 parent 4de2190 commit 3ce6a62

File tree

1 file changed

+1
-21
lines changed
  • app/code/Magento/Config/Block/System/Config/Form/Field

1 file changed

+1
-21
lines changed

app/code/Magento/Config/Block/System/Config/Form/Field/File.php

Lines changed: 1 addition & 21 deletions
Original file line numberDiff line numberDiff line change
@@ -13,28 +13,8 @@
1313

1414
namespace Magento\Config\Block\System\Config\Form\Field;
1515

16-
use Magento\Framework\Data\Form\Element\CollectionFactory;
17-
use Magento\Framework\Escaper;
18-
use Magento\Framework\Data\Form\Element\Factory;
19-
2016
class File extends \Magento\Framework\Data\Form\Element\File
2117
{
22-
/**
23-
* @param Factory $factoryElement
24-
* @param CollectionFactory $factoryCollection
25-
* @param Escaper $escaper
26-
* @param array $data
27-
*/
28-
public function __construct(
29-
Factory $factoryElement,
30-
CollectionFactory $factoryCollection,
31-
Escaper $escaper,
32-
array $data = []
33-
) {
34-
$this->escaper = $escaper;
35-
parent::__construct($factoryElement, $factoryCollection, $this->escaper, $data);
36-
}
37-
3818
/**
3919
* Get element html
4020
*
@@ -57,7 +37,7 @@ protected function _getDeleteCheckbox()
5737
$html = '';
5838
if ((string)$this->getValue()) {
5939
$label = __('Delete File');
60-
$html .= '<div>' . $this->escaper->escapeHtml($this->getValue()) . ' ';
40+
$html .= '<div>' . $this->_escaper->escapeHtml($this->getValue()) . ' ';
6141
$html .= '<input type="checkbox" name="' .
6242
parent::getName() .
6343
'[delete]" value="1" class="checkbox" id="' .

0 commit comments

Comments
 (0)